{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:6ZP6Q4JDQMIDRNPXDAMCFEJ52D","short_pith_number":"pith:6ZP6Q4JD","canonical_record":{"source":{"id":"2201.12416","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-28T21:01:06Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"e06d6c0864394215f906c7e5330a99d1a8ec7d92e9ce9b78e141b08fcb5cc37a","abstract_canon_sha256":"77ee203fa8660be0fcd30911fe0674c05db601099040bd31827474b9fea11163"},"schema_version":"1.0"},"canonical_sha256":"f65fe87123831038b5f7181822913dd0c8542d5848a7bd2c7111d9975bb3d7d2","source":{"kind":"arxiv","id":"2201.12416","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.12416","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"arxiv_version","alias_value":"2201.12416v2","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.12416","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_12","alias_value":"6ZP6Q4JDQMID","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_16","alias_value":"6ZP6Q4JDQMIDRNPX","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_8","alias_value":"6ZP6Q4JD","created_at":"2026-07-05T04:17:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:6ZP6Q4JDQMIDRNPXDAMCFEJ52D","target":"record","payload":{"canonical_record":{"source":{"id":"2201.12416","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-28T21:01:06Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"e06d6c0864394215f906c7e5330a99d1a8ec7d92e9ce9b78e141b08fcb5cc37a","abstract_canon_sha256":"77ee203fa8660be0fcd30911fe0674c05db601099040bd31827474b9fea11163"},"schema_version":"1.0"},"canonical_sha256":"f65fe87123831038b5f7181822913dd0c8542d5848a7bd2c7111d9975bb3d7d2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:17:20.386857Z","signature_b64":"gpOEyA+Jy8WYF41R/9FsSBoM6/jy/dbKiy2EHU/tv6tA6G+OEM/HZ8hRCSINltQwqaZl5VK8fmsNL74CmgtuBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f65fe87123831038b5f7181822913dd0c8542d5848a7bd2c7111d9975bb3d7d2","last_reissued_at":"2026-07-05T04:17:20.386387Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:17:20.386387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.12416","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:17:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+anCo+6z+t4Q0o+qbesEonHYchJTSHh3LfeRu0hHEAWo8FPS6tnE1yCMdmyLPboPukx7x0h586E5izonXGbWDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:01:02.333393Z"},"content_sha256":"d6f77c603615af00e57e4e5a822fee24052ebf97912e71d0439c9a287b635a0f","schema_version":"1.0","event_id":"sha256:d6f77c603615af00e57e4e5a822fee24052ebf97912e71d0439c9a287b635a0f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:6ZP6Q4JDQMIDRNPXDAMCFEJ52D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","cs.NI"],"primary_cat":"cs.CR","authors_text":"Abdul Rahman, Akshay Kakkar, Christopher Redino, Deepak Kushwaha, Edward Bowen, Lanxiao Huang, Paul Park, Peter Beling, Ryan Clark, Tyler Cody","submitted_at":"2022-01-28T21:01:06Z","abstract_excerpt":"Reinforcement learning (RL), in conjunction with attack graphs and cyber terrain, are used to develop reward and state associated with determination of optimal paths for exfiltration of data in enterprise networks. This work builds on previous crown jewels (CJ) identification that focused on the target goal of computing optimal paths that adversaries may traverse toward compromising CJs or hosts within their proximity. This work inverts the previous CJ approach based on the assumption that data has been stolen and now must be quietly exfiltrated from the network. RL is utilized to support the "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.12416","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.12416/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:17:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k0iki9FcffgJUIM+ogtzQg8m/zgW70awPKC0jsEBMHtFjYiUSj7kPP6MVZJ2kSjoV3Mx2w9Ghnhv1CFSXEhNDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-08T14:01:02.333786Z"},"content_sha256":"f31c6e95db07a6c98739d9323fc9c10e7ad9c96771b1ad88a54b32ea9cb414ee","schema_version":"1.0","event_id":"sha256:f31c6e95db07a6c98739d9323fc9c10e7ad9c96771b1ad88a54b32ea9cb414ee"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/bundle.json","state_url":"https://pith.science/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-08T14:01:02Z","links":{"resolver":"https://pith.science/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D","bundle":"https://pith.science/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/bundle.json","state":"https://pith.science/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6ZP6Q4JDQMIDRNPXDAMCFEJ52D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:6ZP6Q4JDQMIDRNPXDAMCFEJ52D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"77ee203fa8660be0fcd30911fe0674c05db601099040bd31827474b9fea11163","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-28T21:01:06Z","title_canon_sha256":"e06d6c0864394215f906c7e5330a99d1a8ec7d92e9ce9b78e141b08fcb5cc37a"},"schema_version":"1.0","source":{"id":"2201.12416","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.12416","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"arxiv_version","alias_value":"2201.12416v2","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.12416","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_12","alias_value":"6ZP6Q4JDQMID","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_16","alias_value":"6ZP6Q4JDQMIDRNPX","created_at":"2026-07-05T04:17:20Z"},{"alias_kind":"pith_short_8","alias_value":"6ZP6Q4JD","created_at":"2026-07-05T04:17:20Z"}],"graph_snapshots":[{"event_id":"sha256:f31c6e95db07a6c98739d9323fc9c10e7ad9c96771b1ad88a54b32ea9cb414ee","target":"graph","created_at":"2026-07-05T04:17:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.12416/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Reinforcement learning (RL), in conjunction with attack graphs and cyber terrain, are used to develop reward and state associated with determination of optimal paths for exfiltration of data in enterprise networks. This work builds on previous crown jewels (CJ) identification that focused on the target goal of computing optimal paths that adversaries may traverse toward compromising CJs or hosts within their proximity. This work inverts the previous CJ approach based on the assumption that data has been stolen and now must be quietly exfiltrated from the network. RL is utilized to support the ","authors_text":"Abdul Rahman, Akshay Kakkar, Christopher Redino, Deepak Kushwaha, Edward Bowen, Lanxiao Huang, Paul Park, Peter Beling, Ryan Clark, Tyler Cody","cross_cats":["cs.LG","cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-28T21:01:06Z","title":"Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.12416","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6f77c603615af00e57e4e5a822fee24052ebf97912e71d0439c9a287b635a0f","target":"record","created_at":"2026-07-05T04:17:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"77ee203fa8660be0fcd30911fe0674c05db601099040bd31827474b9fea11163","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-28T21:01:06Z","title_canon_sha256":"e06d6c0864394215f906c7e5330a99d1a8ec7d92e9ce9b78e141b08fcb5cc37a"},"schema_version":"1.0","source":{"id":"2201.12416","kind":"arxiv","version":2}},"canonical_sha256":"f65fe87123831038b5f7181822913dd0c8542d5848a7bd2c7111d9975bb3d7d2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f65fe87123831038b5f7181822913dd0c8542d5848a7bd2c7111d9975bb3d7d2","first_computed_at":"2026-07-05T04:17:20.386387Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:17:20.386387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gpOEyA+Jy8WYF41R/9FsSBoM6/jy/dbKiy2EHU/tv6tA6G+OEM/HZ8hRCSINltQwqaZl5VK8fmsNL74CmgtuBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:17:20.386857Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.12416","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6f77c603615af00e57e4e5a822fee24052ebf97912e71d0439c9a287b635a0f","sha256:f31c6e95db07a6c98739d9323fc9c10e7ad9c96771b1ad88a54b32ea9cb414ee"],"state_sha256":"a3ee5c33d89073fd371e5fe68185d52bc5f53f39f3b862f43d7df3f84efeeb48"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UiU1r5/tDy0Xoik9GMEQdtUgRm25rxosY39BK9VaXMKeeR7YsIFNFrGUebKcs/VnnngrkWct26HR9hJmtFIXDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-08T14:01:02.335973Z","bundle_sha256":"f2626143f0c5c298c649378b5fb00eb66fbb3851eb7ff9a4a3f2c6be24cccedb"}}